CVE-2020-8156: Fedoraproject Fedora

High severity, CVSS 7.0. EPSS: 1% chance of exploitation in the next 30 days.

A missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack.

Affected products

• Fedoraproject Fedora: version 32 only
• Nextcloud Mail: before 1.1.4 (fixed in 1.1.4)

Published 2020-05-12. Last modified 2026-06-17.